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Abstract 



The semantic framework for the modal logic of knowledge due to Halpern and Moses pro- 
vides a way to ascribe knowledge to agents in distributed and multi-agent systems. In this 
paper we study two special cases of this framework: full systems and hypercubes. Both model 
static situations in which no agent has any information about another agent's state. Full sys- 
tems and hypercubes are an appropriate model for the initial configurations of many systems 
of interest. We establish a correspondence between full systems and hypercube systems and 
certain classes of Kripke frames. We show that these classes of systems correspond to the 
same logic. Moreover, this logic is also the same as that generated by the larger class of weakly 
directed frames. We provide a sound and complete axiomatization, S5WD„, of this logic. Fi- 
nally, we show that under certain natural assumptions, in a model where knowledge evolves 
over time, S5WD„ characterizes the properties of knowledge not just at the initial configura- 
tion, but also at all later configurations. In particular, this holds for homogeneous broadcast 
systems, which capture settings in which agents are initially ignorant of each others local 
states, operate synchronously, have perfect recall and can communicate only by broadcasting. 
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1 Introduction 



Modal logics of knowledge have been proposed as a formal tool for specifying and reasoning about 



multi-agent systems in a number of disciplines, including Distributed Computing |HM9C], Artificial 
Intelligence ]McC89[ and Economics [ |AmTL76| , |RW90[ . 



The logic most commonly applied in this area is the logic S5„, a generalization to a multi- agent 
setting of the logic S5 ( see, e.g ., [HC9(:] and | |Gol92 ), which was originally proposed as a model of 



knowledge by Hintikka [Hin63] in Philosophical Logic. This application of S5 interprets the modal 



formula □(/) as "it is known that (/>". So interpreted, the logic S5 models an ideal agent, whose 
knowledge has the properties of being veridical (everything the agent knows is true), and being 
closed under positive introspection (the agent knows what it knows) and negative introspection 
(it knows what it does not know). These properties have been the subject of a significant body of 
criticism in the philosophical literature, but S5 remains an appropriate model for applications in 
computer science and economics, since it captures an information theoretic notion of knowledge 
of interest in these areas. 

The logic S5„ is a multi-modal version of S5, including for each i = 1 . . . rt an operator D^. The 
intended interpretation is that each i = 1, . . . ,n represents an agent, and expresses "agent 
i knows that <^." The logic S5„ can be axiomatized by taking all the propositional tautologies; 
the axiom schemas □i(p g) ^ D^g, and Oj_p =^> p, and O^p DiDiP, and ^^i^p ^ 

□j-iDj-ip, and the inference rules Modus Ponens, Necessitation and Uniform Substitution. 

The logic S5„ has also been extended to deal with properties that arise when we investigate 
the state of knowledge of the group. Subtle concepts like common knowledge and distributed 
knowledge have been investigated, as has the combination of the logic of knowledge and time (see 



|FHMV95, MH95] for extensive treatments of this literature.) Although the focus of research in 
this area has been on the combination of the knowledge modalities, modeled by S5, with modalities 
expressing other mental states, it has been noted that in certain situations, the axioms of S5WD„ 
provide an incomplete description of the properties of knowledge. One of the characteristics of 
the S5„ axioms is that they do not appear to state any interaction between one agent's knowledge 
and that of another. Some such interactions nevertheless follow, e.g., it can be shown that n.^cf) 
-ndj^cj) is valid in S5„. (This formula above states that agent j cannot rule out the possibility of 
a fact known by agent i.) However, there are specific settings in which further such interactions 
hold. For example, consider a distributed system composed of a group of agents A = {1, . . . , n} 
and the following situations: 

One agent knowing everything the others know. An agent j is the central librarian of a 
distributed system of agents that rely on j to maintain all their knowledge. 

Linear order in agents' private knowledge. The agents operate within a chain of command 
subject to security restrictions. Each agent in the chain has a higher security clearance than 
the previous agent, and has access to a larger set of information sources. 

These and similar scenarios can be modeled by extensions of S5„ in which interaction axioms 
are imposed. Write Si_j for the axiom schema ^j4>- Then the first example above can be 

modeled by the logic S5„ plus Si,j for all i € A. The second scenario can be described by assuming 
an order on the set of agents reflecting their increasing information, and by taking S5„ plus Sij 
for all i < j. These are just two isolated examples but there is actually a broad spectrum of 
possible specifications on how private states of knowledge are affected by other agents' knowledge 



(see |LR99| for a detailed exposition). At one end of the spectrum we have the system S5 in which 
all agents have the same knowledge. This can be modeled by taking an extension of S5,i in which 
the axiom Sij holds for all i,j S A, making all the modalities collapse onto each ot her. Th is is 



a very strong constraint. At the other end of the spectrum is simply S5„. Catach [ Cat88 | has 
studied a limited class of such interactions between knowledge of the agents. 

While the examples of interaction axioms above derive directly from static assumptions about 
the interaction between agents' knowledge, there are also cases where such interactions arise in 
more subtle ways. Rather than start with assumptions that are directly about interactions between 
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agents' knowledge, one could begin with an extensional model of distributed systems, of the kind 
commonly used in studies of distributed computing. The notion of interpreted system of Halpern 
and Moses [HM90, FHMV95] takes this approach. The interpreted systems model describes a 
multi-agent system in terms of the local states of the agents and how such local states evolve over 
time as the agents communicate. A local state may be as mundane as a listing of the values of 
the set of variables maintained by the agent, or it could be a richly structured representation of 
the information available to the agent. A global state consists of a local state for each agent, plus 
a state for the environment within which the agents operate. In general, there may be constraints 
connecting the components of a global state, so not every possible global state need occur in the 
system. 

One can define two situations in such a system to be equivalent for agent i if the agent has the 
same local state in these situations. This equivalence relation can then be used as the accessibility 
relation corresponding to agent i's knowledge operator D^. This approach provides an information 
theor etic notio n of knowledge that has been been found useful in analyses of distributed systems 
(see [ FHM V95| for discussion of a number of examples and extensive citations.) 

Generally, the logic of knowledge that arises from this semantic framework is S5„. However, 
it has been noted that in certain quite natural special cases, additional axioms arise that state 
interactions between agents knowledge. Fagin et al. [ FHV92 , FV86 | present one such example. 
They study systems in which agents with perfect recall, operating in a static world, communicate 
their knowledge about that world by means of unreliable message passing. 

In this paper we introduce and study another special case of the interpreted systems model 
that results in interaction axioms and can be axiomatized by an extension of S5„ that falls into 
the above-mentioned spectrum. The classes of systems we investigate are called full systems and 
hypercubes. Both are systems in which every possible combination of individual agents' local 
states occurs in some global state in the system. In hypercubes we require additionally that 
every combination of state of the environment and the agents' local states occurs. Full systems 
and hypercubes are appropriate classes of systems for modeling the initial configurations of many 
systems of interest, in which no agent has any information concerning any other agent's state. 
(Thus each agent considers possible every combination of the other agents' local states.) 

Full systems and hypercubes may be shown to satisfy an axiom that does not follow from 
S5„. This axiom states in a quite intuitive fashion the property that every combination of the 
individual agent's local states occurs in some global state of the system. By characterizing full 
systems and hypercubes in terms of certain classes of Kripke frames, we establish a sound and 
complete axiomatization of the logic of knowledge in these classes of systems. Interestingly, the 
two classes correspond to the same logic, which we call S5WD„. The nomenclature arises from 
the fact that we show that a further class of frames, the weakly directed frames, corresponds to 
the same logic. We also show that S5WD„ is decidable. 

The definition of full systems and hypercubes takes a static viewpoint of multi-agent systems 
that does not use the full power of the interpreted systems model, which is also capable of modeling 
the evolution of knowledge over time. As noted above, these definitions provide an appropriate 
characterization of the agents' knowledge in the initial configurations of many distributed systems. 
However, we show that the logic S5WD„ has broader applicability than simply reasoning about 
such initial configurations. We also study in this paper the dynamic behavior of knowledge in 
homogeneous broadcast environments. These model a particular communication architecture, in 
which agents operate synchronously and can communicate only by broadcasting information to all 
agents. We assume that agents have perfect recall, and that their initial configuration is character- 
ized by a hypercube. We show that not just the initial configuration, but all configurations arising 
in such a system can be characterized using a full system. It follows that S5WD„ exactly captures 
the properties of knowledge in homogeneous broadcast systems. Since S5WD„ extends S5„, this 
provides another example of a natural situation in which S5„ is an incomplete characterization of 
the logic of knowledge, analogous to the results of Fagin et al. |FHV92, FV86| . 

The paper is organized as follows. In Section 2 we recall the two standard semantics for 
knowledge in multi-agent systems (Kripke models and interpreted systems), and we introduce full 
systems and hypercubes. In Section 3 we formally relate full systems and hypercubes to Kripke 
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models by identifying corresponding classes of Kripke frames. We also show that with respect to 
the logic of knowledge we consider in this paper these classes of frames generate the same logic. 
In Section 4 we present a sound and complete axiomatization S5WD„ for this logic. We prove the 
logic decidable in Section 5. These sections all deal with a static framework. In Section 6 we go 
on to consider a dynamic framework that models how agents' knowledge changes over time. We 
define homogeneous broadcast systems, and show that agents' states of knowledge in such systems 
can be characterized by a hypercube at each point of time, thereby showing that S5WD„ is also a 
sound and complete axiomatization of the logic of knowledge in homogeneous broadcast systems. 
We illustrate the theory with an example of a two-person card game. Finally, in Section 7 we 
draw our conclusions and we suggest further work. 



2 Definitions 

Amongst the approaches that have been proposed to the semantics of logics for knowledge are 
interpreted systems and Kripke models. The two approaches have different advantages and dis- 
advantages. On the one hand, interpreted systems provide a more concrete and intuitive way to 
model real systems, but on the other hand Kripke models come with an heritage of fundamental 
techniques that may be used to prove properties of the logic. 

In this section we briefly recall the key definitions of Kripke frames and interpreted systems. 
We then we define hypercube systems and full systems, the particular classes of systems that are 
the focus of this paper. 

We use the following mathematical notations throughout. If is a set, we write \W\ for its 
cardinality. If ^ is an equivalence relation on W and w e W , then we write W/ ^ for the set of 
equivalence classes of ^, and write [w],^ for the equivalence class containing w. 



2.1 Kripke models 

Kripke models pCri59 were first formally proposed in Philosophical Logic. They have since been 
used within computer science and Artificial Intelligence as semantic structures for logics for belief, 
logics for knowledge, temporal logics, logics for actions, etc., all of which are modal logics. Over 
the last thirty years, many formal techniques have been developed for the study of modal logics 
grounded on Kripke semantics, such as completeness proofs via canonical models, decidability 



via the finite model property |HC96|, and more recently, techniques for combining logics |KW91 
Gab96|. 



We now briefly recall a few concepts from this literature that we will be using later in the 
paper. For more technical details and motivation, the reader is referred to an introduction to 
modal logic, such as pC96| or pol9^ or |HC8|. We state our definitions for the multi-modal 
case, which is a slight generalization of those in much of the literature. 

We assume a set Atoms = {p, . . . } of propositional atoms, and a finite A = {1, . . . , n} of agents. 
We will deal primarily with a formal language given by the following grammar: 

(/) ::= p I ^0 I A 02 I Oi<P 

where p G Atoms and i € A. We write £„ for the set of formulae generated by this grammar when 
A = {1, . . . ,n}. Intuitively the formula represents the situation in which the agent i knows 
the fact represented by the formula 0. Other propositional connectives such as disjunction and 
implication can be defined in the usual way. If is a set, then idw is the identity relation on W, 
i.e., the relation {{w,w) \ w G W}. 

Kripke semantics is based on the following structures. 

Definition 2.1 (Kripke frames and Kripke models) A frame F is a tuple F — {W,Ri, . . . , 
Rn), where W is a non-empty set (called set of worlds) and for each i G A the component Ri is a 
binary relation on W . If all relations are equivalence relations, the frame is an equivalence frame 
and we write ~i for Ri . 
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A model M is a tuple M — (W, . . . , n), where (W, Ri, . . . , is a frame called its 
underlying frame and n : W ~> 2^*°™'' is an interpretation for the atoms. An equivalence model 
is a model whose underlying frame is an equivalence frame. 

We will call equivalence frames E frames and equivalence models E-models. The class of equivalence 
frames will be denoted by Te- The class of all equivalence models is frequently taken to be the 
appropriate class of structures for the logic of knowledge]^ The logic corresponding to this class 
of structures is the logic S5„ [ HM9Cl[ . 



Committing an abuse of notation, given a frame F — [W, Ri, . . . , Rn), and an interpretation tt, 
we will sometimes denote M = {W, Ri, . . . , Rn, n) a,s M — {F, tt). Also when the set A — {1, ... ,n} 
is clear from the context, we will denote M — (VF, . . . , tt) as M = (VF, ti") and 

F = (VF, . . . , Rn) as F = [W, {R^heA)- 

Definition 2.2 (Satisfaction) The satisfaction of a formula (p in a world w of a model M , 
formally AI (p is inductively defined as follows: 

M 1=^ p ifp e tt{w) 

M (pAij if M (f) and M ip 
M Oj^ip if for each w' € W , wRiw' implies M \=wt ip 



Satisfaction for the other logical connectives can be defined in the usual way. 
Validity is also defined by means of the standard definition: 

Definition 2.3 (Validity) A formula (p is valid on a model M — [W, Ri, . . . , Rn, tt), if for every 
point w E W we have M p. A formula (p is valid on a frame F — [W, Ri, . . . , Rn) if for every 
interpretation tt we have {F,tt) \= (p. A class of models A4 validates a formula (p, denoted M. \= (p, 
if for every model M d M we have M \= <p. A formula p is valid on a class of frames T , denoted 
J- \^ <p, if for every frame F G J- we have F \= <p- 

Two frames F — {W, . . . , i?„) and F' = [W , R[, . . . , i?JJ are said to be isomorphic if there 
exists a bijective function h : W ^ W such that for each i — \ . . .n and all points w,w' £W we 
have wRiw' if and only if h{w)R[h{w'). We write F = F' when this is the case. 

We clearly have the following. 

Theorem 2.1 If F and F' are frames with F = F' then for all ip E Cn we have F \= ip if and 
only if F' ip. 

Slightly more general than the notion of frame isomorphism is the notion of p-morphism. We 
can define these both at the level of frames and at the level of Kripke models. 

Definition 2.4 (p-morphism) Let F — {W, Ri, . . . , Rn) and F' = {W , R'l, . . . , R'^) he frames. 
A frame p-morphism from F to F' is a mapping p :W —> W that satisfies 

1. the function p is surjective, and 

2. for all u,v eW and each i — 1 . . .n, if uRiV then p[u)Rip{v), and 

3. for each i = \ . . .n and u E W and v' G W' , if p{u)R[v' then there exists v £ W such that 
uRiV and p{v) — v' . 

If M — (W, . . . , Rn, tt) and M' — (W , R'l, . . . , R'„, it') are Kripke structures, then a model p- 
morphism from M to M' is a mapping p : W W that is a frame p-morphism from (W, Ri, . . . , Rn) 
to (W',Ri,... , R'n) and satisfies q £ tt'{p{w)) if and only if q £ tt{w) for all propositions 
q £ Atoms and all worlds w £ W . 

^ Philosophers have long held qualms ahoiit properties of knowledge (such as negative introspection) that are 
consequences of this class of structures For computer scientists and economists, however, equivalence 

frames capture an information theoretic notion of knowledge that is useful for their applications. 
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The following result shows that p-morphisms preserve satisfaction and validity for the language 

r 



Theorem 2.2 ( \HC84 l page 73) If p is a model p-morphism from M to M' then for all worlds w 
of M and formulae Lp S Cn, we have M V */ '^^'^ only if M' |=p(m) (p. Thus ip is valid on M 
if and only if ip is valid on M' . 

If p is a frame p-morphism from F to F' then for all Lp ^ Cn, we have that if Lp is valid on F 
then Lp is valid on F' . 

Two classes of frames J-^^T^ are validity- equivalent with respect a language C, denoted J-i =c 
J-2, if for all formulae Lp ^ C, we have Ti\= Lp ii and only if T2 \= Lp. 

Theorem 2.3 Suppose that T\ and T2 are classes of frames such that for all F E J-i there exists a 
p-morphism from F to a frame F' G J-2, and conversely, for all F E T2 there exists a p-morphism 
from F to a frame F' E J-i. Then T\ T2 

One further property of the language £„ that will be of use to us is the fact that satisfaction of 
a formula at a world depends only on worlds connected to that world. Say that two worlds w, w' of 
a frame F — {W, ^1, . . . , ~„) are connected if there exists a finite sequence w — wq, ... ,Wk = w' 
of worlds in W such that for j = . . . fc — 1 we have Wj ~i wj+i for some i. Say that F is connected 
if for all pairs of worlds w,w' d W are connected. The connected component of F containing a 
world w is the frame F^ = {Ww, . . . , where Ww is the set of worlds of F connected to 
w, and each ~J is the restriction of ~i to Ww Similarly, the connected component of a model 
M = (F,Tr) containing a world w is the model = {Fyj^i:') where tt' is the restriction of tt 
to Ww The model Alyj is also called the model generated by w from M. The following result 



(see, e.g., |HC84| page 80) makes precise the claim that satisfaction of a formula of £„ at a world 



depends only on connected worlds. 

Theorem 2.4 For all worlds w of a model M and for all formulae '0 G £„ we have M (p if 
and only if AI^ (j). 

A class of frames T corresponds to a formula -0 if for all frames F ^ we have F E J- \i and only 
if H 0- We consider such correspondences between classes of frames and formulae at several 
places in the paper, since they frequently indicate that the formula can be used to obtain an 
axiomatization of the class of frames. 

2.2 Interpreted systems 

Interpreted systems are a model for distrib uted and multi-agent systems proposed by Fagin, 
Halper n, Moses and Vardi [|FHMV95| , |HF85|| , based on an earlier model of Halpern and Moses 



[HM9C]. They provide a general theoretical framework within which it is possible to model a 
variety of modes of communication, failure properties of communication channels, and assump- 
tions about coordination such as synchrony and asynchrony. Its specific focus is to enable states of 
knowledge to be ascribed to the agents in the system, and to study the evolution of this knowledge 



as agents communicate. For discussion of axiomatic properties of this model see |FIIMV95 and 



[ HMV97 I 



The key aspect of interpreted systems that allows knowledge to be ascribed to agents is the 
notion of local state. Intuitively, the local state of an agent captures the complete scope of the 
information about the system that is accessible to the agent. This may include the values of its 
personal variables and data structures, its record of prior communications, etc. The agents' local 
states, together with a state of the environment within which they operate, determines the global 
state of the system at any given time. 

Consider n sets of local states, one for every agent of the system, and a set of states for the 
environment. We denote by Li the non-empty sets of local states possible for agent i, and by 
Lf. the non-empty set of possible states for the environment. Elements of Li will be denoted by 
li,l2, ■ ■ ■ ■ Elements of Lf. will be denoted by /e, . . . . 
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Definition 2.5 (System of global states) A system of global states for n agents is a subset of 
a Cartesian product Le x Li x • ■ • x L„. An interpreted system of global states is a pair {S,it) 
where S is a system of global states andiT : S ^ 2^*°™" is an interpretation function for the 
atoms. 

The reason for considering a subset is that some of the tuples in the Cartesian product might 
not be possible because of explicit constraints present in the multi-agent system. The framework 



of Fagin et al. |FHMV95| models the temporal evolution of a system by means of runs, which are 
functions from the natural numbers to the set of global states. An interpreted system, in their 
terminology, is a set of runs over global states together with a valuation for the atoms of the 
language on points of these runs. We simplify this notion here, since we will deal initially with an 
atemporal setting. However, we will consider a run-like construct in Section 



As shown in |FHMV95 1 , interpreted systems can be used to ascribe knowledge to the agents 



by considering two global states to be indistinguishable for an agent if its local state is the same 
in the two global states. We formulate this here as a mapping from systems of global states to 
Kripke frames. 

Definition 2.6 The function F mapping systems of global states to Kripke frames is defined as 
follows: if S ^ Lg X Li X . . . X L„ is a set of global states for n agents then F{S) is the Kripke frame 
(W, '^1, . . . , ^n), with W — S , and for each i = 1 . . .n the relation defined by {li, . . . , Z„) ~i 
(I'l, . . . , l'^) if li — l[. The function F is naturally extended to map interpreted systems of global 
states to Kripke models as follows: if F{S) — (W, '^i, . . . , then F{S, tt) = (W, . . . , '^ni tt). 

Note that for all systems of global states S, the frame F{S) is an equivalence frame. Combined 
with the semantic interpretation of the language £„ on Kripke models, this mapping provides a 
way to interpret £„ on interpreted systems of global states (for n agents) . We say that S is 
valid on an interpreted system of global states {S, tt) if (j) is valid on the model F{S, tt). Similarly, 
(j) is valid on the system S of global states if 4> is valid on F{S, tt) for all interpretations tt. 



2.3 Hypercube systems and full systems 

We now define two classes of systems of global states, full systems and hypercube systems, that 
provide an intuitive model for the initial situation in many systems of interest. These classes both 
capture situations in which the agents do not have information about each others' local states. In 
hypercubes the environment is assumed trivial, so there is no interesting correlation between the 
agents' states and the environment. 

Definition 2.7 (Hypercube systems) A hypercube system, or hypercube, is a Cartesian prod- 
uct H = Lg X Li X ■ ■ ■ X Ln, where Lg is a singleton and Li, . . . , Ln are non-empty sets. The class 
of hypercube systems is denoted by Ti. 

In full systems, the agents may, however, have some information about how their local state 
correlates with the state of the environment. 

Definition 2.8 (Full system) A system S C Lg x Li x ■ • • x L„ is full if for every tuple 
{h,... ,ln) ^ Li X ■ ■ ■ X Ln there exists s £ Lf. such that {s,li,... ,ln) G S. The class of full 
systems is denoted by J-S. 

Clearly, every hypercube is full. The converse is not true. The following example illustrates 
these definitions. 

Example 2.1 Consider a card game with n players and n decks of cards. At the start of play, 
each player is dealt a hand of 12 cards, with player i 's cards all drawn from deck i, where 1 < i < n. 
Each player sees only their own hand, and not the hand of other players, nor the undealt cards 
remaining in any of the decks. 
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The situation at the start of play may be described as a system of global states as follows. Let 
D be the set of all cards constituting a deck. A hand of 12 cards corresponds to a set S* C D with 
\S\ — 12. Let H be the set of such sets S. Then the set of possible local states for each agent 
i = 1 . . .n is Li — LI. The set of possible states of the environment is L^ = {D \ S \ S E LL}^ , 
i.e. the set of arrangements in which each of the n decks has 12 cards removed. The set of global 
states of the system is 

S — {(s, hi, . . . , hn) I hi e Li for i = 1 . . .n and s = {D \ hi, . . . ,D \ /i„)}. 

This system is full, but not a hypercube. Using this modeling of the initial state of the game, 
we may address questions concerning what a player knows about the undealt cards. Lf the only 
issue of concern is a player's knowledge about the cards that have been dealt, a more appropriate 
modeling of the game may be to take S = {1} x as the system of global states. This system is 
a hypercube. (We note that the initial situation in most cardgames, where players are dealt their 
hand from the same deck, is neither a hypercube nor a full system. For example, a situation in 
which two players both hold the ace of spades is not possible in such a game.) 

We will show in Section || that the applicability of the class of full systems and hypercubes 
goes beyond that of modeling the initial configurations of naturally occurring systems. We will 
define a dynamic framework that shows how agents' knowledge changes over time, and illustrate it 
with extensions of the card-deck example. Our first aim, however, will be to axiomatize the class 
of hypercubes and full systems. In order to use the tools of modal logics for this aim we formally 
relate these classes of systems to several classes of Kripke frames. 



3 Classes of frames corresponding to hypercubes and full 
systems 

In this section we identify a number of properties of frames that can be used to characterize 
the frames corresponding to full systems and hypercubes up to isomorphism. We also show 
that, somewhat surprisingly, full systems and hypercubes generate precisely the same set of valid 
formulae of the language £„. We obtain this result by establishing the existence of p-morphisms 
between frames in the classes of frames corresponding to these classes of systems. 

3.1 Directed frames 

We have seen above that every system of global states generates a frame. Our aim in this section 
is to characterize the frames generated by hypercubes and by full systems. The following result 
identifies some properties of the resulting frames based on the properties of the system of global 
states. 

Lemma 3.1 Let S be a system of global states, and let F{S) = (W, ^i, . . . , ^n) be the frame 
defined from it by Definition 



2.t. 



1. Lf S is a hypercube then F{S) is such that PlieA — idw ; 

2. Lf S is full and n > 2 then F{S) is connected. 

3. Lf S is full then for any uii, . . . , Wn G W there exists aw £ W such that Wi ~i w for each 
i = 1, . . . ,n. 



Proof For (1), suppose that S is a hypercube and consider any two elements w — {le,li, • ■ • ,ln), 
w' = {le,li, ■ ■■ jl'n) "in W such that w{f]^^j^ ^i)w' . (Note that the first component of these tuples 
must be the same if S is a hypercube.) Then for all i in A, (Zg, Zi, . . . , Z„) ~i {le,l[, . . . ,1^). 
Therefore, by definition of the relations ~i , for all i in A we have k = I'i, that is w = w' . 
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For (2), suppose that S is full and let w = (le,li, ■ ■ ■ ,ln) o,nd w' — {l'^,l[, . . . ,11^) be points in 
S . Since S is full there exists I'l such that w" = (Z", Zi, ^2 • ■ ■ , I'n) ^■s ^ ■ Clearly w w" ^2 ui' . 
Thus, there is a path from w to w' of length two. 

For (3), suppose that S is full and consider any wi = {ll, Zj, . . • , Z,\), . . . , w„ = (/", In)- 
Since S is full there exists Ze such that W = {le, l\, . . . , 1^) G S. By Definition \2.(\ , the world w is 
in W and by construction for each i = 1, . . . ,n, we have Wi '^i w. □ 

This shows that Kripke frames that we build from the hypercubes and fuU systems by means 



of the standard technique ([ FHMV95 |) constitute a proper subclass of the class of equivalence 



frames. We will show that the properties of Lemma 3.1 can be used to characterize the images of 
the hypercubes and full systems. 

We will say that a frame (VF, ~i, . . . , ~„) has the identity intersection property, or is an / 
frame, if HieA = idw- Similarly, we say that a frame is directed, or is a D frame, if for any 
wi, . . . ,Wn G W there exists a W £ W such that Wi ~i w for each i = 1, . . . ,n. We will also 
use combinations of these letters to refer to frames satisfying several of these properties. Thus, 
directed equivalence frames with the identity intersection property will be called EDI frames. 
Similarly, we subscript J- by these letters to indicate the class of frames have the corresponding 
properties; thus Tedi denotes the class of EDI frames. Lemma states that the image of a full 
system under F is an ED frame and since every hypercube is full, the image of a hypercube is an 
EDI frame. 

The converse of these properties is not true, e.g., it is not the case that every ED frame is the 
image of a hypercube. However, something very close to this is the case: 

Lemma 3.2 1. For every ED frame F there exists a full system S such that F{S) = F. 
2. For every EDI frame F there exists a hypercube S .such that F{S) = F. 



Proof We first show part (1). Let F = (VF, ,~n) be an ED frame. Take S CW x 

W/^i X ... X W/^n to be the set of tuples {w, , . . . , where w G W . We show that S 

is a full system and such that F{S) = F. F{S) = F. 

To see that S is full, let wi,...w„ G W. We show that there exists w € W such that 
{w, [wi]^-^, . . . , [wnj^^} G S. Since F is a D frame, there exists a world w .such that w Wi 
for each i = 1 . . .n. Thus {w, [wi]^-^, ... , [if„]^^) = {w, [w],~^j_, ... , [w]^^) G S. This shows that S 
is full. 

Write F{S) — {S,^[, . . . , ^^). To show that F{S) = F, define the mapping h : S ^ W by 
h({w, [w]^-^, . . . , [w]~„)) = w. It is clear that h is a bijection. Moreover, 

{Wi,[wi]^^,... ,[wi]^J (u;2, [W2]~i, ■ • ■ , [fi'2]~„) 

iff [Wl]r^. = ['W2]r^i 

iff Wi ~j W2 

iff h{{wi, . . . , [Wl]~„)) h{{w2, [W2]~i, ■ • ■ , [W2]~„)). 

Thus, h is a frame isomorphism, establishing F(S) = F. This completes the proof of part (1). 

For part (2), let F ^ [W,^i, . . . , -„) be an EDI frame. Define 5 = {1} x W/^i X...X W/^„. 
Clearly S is a hypercube. Write F{S) = {S, '^'i, . . . , ~^). We show that F{S) = F. 

Consider an element (1, [wij^^, . . . , [u'ri]~„} of S. Since F is a D frame, there exists w £ W 
such that w G [wi]^. for each i = 1, . . . ,n. Moreover, because F is an I frame this w is unique. 
Define the mapping h : S W by taking /i((l, . . . , [wnj^^)) to be the unique w such that 

w G [wi]^; for each i — 1, . . . ,n. The mapping h is surjective because for each w £ W we have 
h{{l, . . . , — w. Moreover h is injective because if h{{l, [wij^j, . . . , [w„]^^)) = w = 

h{{l,[w'i]^-^, . . . , [w^]~„}) then for each i = l...n we have that w is in both [wi]^^ and [w'^],^-. 
Thus, these equivalence classes must be the identical, and hence the tuples (1, . . . , [wn]^„) 

and (1, [wJ^J^j, . . . , are identical. 

It remains to show that h has the homomorphism property. For this, note that by construction, 
for each i — I, . . . ,n we have h{{l, [wij^j , ■ • ■ , [wn]~„)) ~j Wi. Thus if (1, [wij^j , ■ • ■ , [wn]~„) ~i 
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a 1,2 b 




b 



F' 



Figure 1: Two p-morphic frames used in the proof of Lemma 3.3 



{l,[w[]^^, . . . ,[w^]~„) then [wi]^^ = hence , . . . ,[t«,i]~„}) ~i Wi w[ ~j 

h{{\,[w'i]r^^, . . . ,[w'^]^^)). Conversely, suppose u = , . . . and v — h{{l, 

[wi]n^i, • ■ • , [w'n],^^)) and u ~i v. By definition of h, u Cz [wi],^. and v £ [w'j]r^^ . Since u v it 
follows that [wi]r^- — [w'j\r^^. Thus, (1, [tuij^^, . . . , [wti]~„) ^'i (1, ■ • • , [Wn]~„}- Thus, h is 

a frame isomorphism, establishing F{S) = F. This completes the proof of part (2). □ 



Using Theorem 2.1, it follows from Lemma 3.1 and Lemma 3.2 that from the point of view of 
the language £„, full systems and ED frames are equivalent, as are hypercubes and EDI frames. 
Stated more precisely, we have the following. 

Theorem 3.1 F{H) =£„ Tedi and F{TS) =£„ Ted- 

Our strategy for axiomatising these classes of systems will be to focus on the corresponding 
classes of frames instead. One approach to this would be to seek axioms that correspond to the 
properties D and I. This turns out not to be possible. 

Lemma 3.3 No modal formula corresponds to property L 



Proof Suppose the opposite and assume there is a formula (j) that corresponds to property I. 
Consider the frame F' in Figure^ The frame F' is an I frame, so F' \= cf). Consider now the 
frame F and a function p : F' F such that p maps points in F according to the names in 
the Figure. It is easy to see that p is a p-morphism from F' to F. Since p-morphisms preserve 



validity on frames (Theorem 2.^) we have that F \= (f). But F is not an I frame and we have a 



contradiction. □ 

Similar reasoning shows that the above holds even by restricting to equivalence frames. 

As an aside, we note that this result is very sensitive to the language under consideration. There 
are extensions of the language under which it fails. For example, consider a language containing an 



operator for distributed knowledge [ FHV92 ] . This operator is used to express the knowledge that 
the group of all agents would have if they pooled their information. Formally, if </) is a formula, 
then so is Da4>. The formula DA(t> is interpreted by associating the relation ~ = Hieyi ~i to the 
operator Da in the standard Kripke-style interpretation, i.e., we define M DaiP if M -0 
for all w' ^ w. Using this operator, we can prove a correspondence result for the intersection 
property. 

Lemma 3.4 An equivalence frame F is an I frame if and only if F \= (p ^ Da4>- 



Proof Left to right. Let M be a model based on F such that M (j). Since Higyi idw, 
then M Da4>- Analogously, suppose M Da4>- Since w{f]^^j^ ^i)w we have M ^„ 0. 
Right to left. Suppose F \= (j) <=^ Da4> and for all i we have wi W2. Take a valuation n such 
that p G Tr{w) if and only if w ~ wi. Since F,tt ^.^1 P ^ F>aP and {F,Tr) \=wi P, we have 
{F,Tr) \=wi F>AP and so {F,tt) P- But since Tr{p) — {wi}, it must be that wi — W2. □ 
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Figure 2: A DI frame mapping a D frame via a p-morphism 



This result suggests that the axiom cf) <^ Da4> could be used as part of an axiomatization of 
the class of EDI frames when the language includes the distributed knowledge operator. We are 



concerned in this paper, however, with a weaker language. Lemma 3.3 suggests that it may be 
inappropriate to focus on the identity intersection property in seeking to obtain the axiomatization. 
Indeed, it turns out that this property has no impact on the set of valid formulae of £„ in the 
context of interest to us. More precisely, we have the following result. 

Theorem 3.2 Tedi =c„ J'ed 

To establish Theorem B^, we prove that any ED frame can be seen as the target of a p- 



morphism from an EDI frame; the result will then follow from Theorem 2^ using the fact that 
p-morphisms between frames preserve validity and that the class of DI frames is a subclass of 
the class of D frames. (Note that the identity map on a frame is a frame isomorphism, hence a 
p-morphism.) 

Consider an ED frame F — (W, ~i, . . . , ^rn)- Write ~ for the relation ni=i m since each 
of the ~i is an equivalence relation, so is ~. The frame F can then be viewed as the union of 
equivalence classes of the relation which we call clusters. Clusters containing more than a single 
point are sub-frames in which property I clearly does not hold; in general a cluster may be infinite 
in size. 

If we want to construct an EDI frame that maps to a particular ED frame by a p-morphism, 
one way is to replace every cluster of the ED frame with a sub-frame that is EDI but that can still 
be mapped into the cluster. Figure || depicts the relatively simple case of an equivalence frame F 
composed by three points a,b,c connected by all the relations: ~i,'^2, in this case; F clearly is 
ED but not EI0. The frame F' on the right of the figure is an EDI frame; the names of its points 
represent the targets of the p-morphism from F' onto F. So, for example the top left point of F' 
is mapped onto a of F; the relations are mapped in the intuitive way. It is an easy exercise to 
show that F is indeed a p-morphic image of F' and will therefore validate every formula which is 
valid on F'. 

The aim of the following is to define precisely how to build, given any ED frame, a new EDI 
frame in which every cluster is "unpacked" into an appropriate similar structure and to define the 
relations appropriately. 

In order to achieve the above, we present two set theoretic results. In Lemma ^.5| we show that 
every infinite set X can be seen as the image of a product X™ under a function p. Intuitively this 
lemma will be used by taking the set X as one of the clusters of an EDI frame F, the function 

^ The relations are supposed to be the reflective transitive closure of the the ones depicted in the flgure. 
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p as the p-morphism and the product X™ (where m is the number of relations on the frame) as 



the sub-frame that will replace the cluster in the new frame F' . Lemma B.6 extends the result of 



Lemma 3.5 to guarantee that even if the clusters differ in size it is always possible to find a single 
sub-frame that can replace each of them. 

We assume m to be a natural number, such that m > 2. 

Lemma 3.5 Given any infinite set X , there exists a function p : X"^ — > X such that for 
alii G {l,...,m} and for all u^Xi G X, there are Xi, Xi-i, Xi+i, Xm G X, such that 
p{xi, . . .,Xm) = u. 

Proof Consider the set T — {r^ y \ x^y £ X} of the transpositions of X , i.e. functions T^.y '. 
X X] where x,y € X, such that if z ~ x then T^^yi^z) = y, if z = y t hen T^^y jz) = x, and 
Tx,y{z) = z otherwise. We have \X\ < \T\ < \X x X\. But by set theory ( ^an84 / page 701 for 



example) \X\ ^ \X x X\, and so \X\ = |r|. 5*0, by induction, we have = |X| = |r|. Call 

f the bisection f : X™^^ T, and define p{xi, . . . ,Xm) = f{xi, . . . ,Xm~i){xm)- To prove the 
lemma holds we consider two cases: i ^ m and i = m. 

For i ^ m, assume any u G X, and any Xi G X. Take any xj for j G {1 . . .to — 1} \ 
{i}. Then f{xi,...,Xm~i) is a transposition of X . So, there exists an Xm G X such that 

f{xi, . . .,Xm-l)iXm) = U. So p{xi, . . . , Xm) = U. 

For i = m, assume again any u G X , and any Xm G X . Consider the transposition Tx^^u! we 
have Tx^^^uixm) = Butr^^^^u = fixi, ■ . . , Xm^i) for some xi,. . . , Xm-i G X. Sop{xi, . . . , Xm) = 
u. □ 

Lemma |3.5| induces a similar result for mappings from to sets whose cardinality is smaller 
than X . 

Lemma 3.6 Given any infinite set X, and a set C ^ 0, such that \C\ < \X\, there exists a 
function p : X™ C such that the following holds for all i £ {I, ... , m}: for all Xi £ X,u £ C, 
there exist xi, . . . , Xi^i, Xi^i, . . . , a;,„ G X , such that p{xi, . . . , Xm) ~ u. 

Proof Consider a set T such that CUT and X have the same cardinality, and let g be a 
bijection from X to (CUT). Th en there is a function p' : {C U T)™ — > (C U T), satisfying the 



property expressed by Lemma 3.5. Define now a function p" : {C U T) C , such that p" {x) = 
X if X £ C , otherwise p" {x) — c, where c is any element in C . Define the function p : X"^ C 
by p{xi, . . . , Xm) = p" ip' {yixi), . . . , g{xm)))- We claim p has the property required. For, let i £ 



{1, . . . , to} and take any Xi £ X and u £ C . Then g{xi) £ (CUT), and so by Lemma 3.1 there exist 
ci, . . . , Ci_i, Ci+i, . . .,Cm £ C UT, such that p'(ci, . . . , ^-1,5(2;^), q+i, . . . , Cm) = u. Define xj = 
S^Hcj) for j £ {l,...,m}\ {i}. We then have p{xi, . . . ,Xm) = p"[p'{ci,. . . , ^(a;^), c 



Cm)) = p"{u) = u since u £ C. □ 

We rely on the two results above to define a function p that maps tuples (c, xi, . . . , Xm) into 
c, where c is a cluster and Xi £ X, for some appropriate set X. The function p is defined as in 



Lemma 3.6 but it has an extra component for the cluster. 



Corollary 3.1 Let C be a set of nonempty .subsets of a set W . Then there exists a set X and a 
function p : C x W such that 

1. for all tuples (c, xi, . . . , Xm) we have p{{c, xi, . . . , Xm)) G c, and 

2. for all c £ C, for all u £ c, for all i ~ 1 . . .m, and for all Xi £ X , for each j £ {1 . . . m} \ {i} 
there exists Xj £ X , such that p{{c, xi . . . Xm)) = u. 
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Proof Let X he an infinite set with cardinality at least as great as the cardinality of any c Cz C. 
This can be constructed by taking the union of these sets c ^ C or by considering the set of the 
natural numbers X = N if all the sets c G C are finite. For each c & C, let pc : X™ —^cbe the 



function promised by Lemma S.t. Define p : C x X"^ W by p(c,Xi, . . . = Pc{xi, ■ ■ ■ ,Xm)- 



It is immediate that this function has the required property. □ 

Theorem 3.3 Given any ED frame F, there exists an EDI frame F' , and a p-morphism p, such 
that p{F') = F. 

Proof Let F ~ {W, ^i, . . . , '^m) be a frame with m relations on its support set W . Write ^ for 
the relation Hi^i m Since each of the is an equivalence relation, so is ^. Since the set of 
worlds W of the frame F is non-empty, it can be viewed as the union of the equivalence classes of 
the relation ^, which we call clusters. Write C for the set of clusters of F. Consider the infinite 



set X and a function p as described in Corollary 3.1, and define the frame F' — {W , ^'i, . . . , '^m) 
as follows: 



m 



• W' ^Cy.X 

• (c, Si, . . . , Xm) (d, yi, . . . , if Xi = Tji and there exist worlds u G c and v G d such that 

U ~i V. 

We can prove that: 

1. The frame F' is EDI. 

Proof a) F' is clearly an equivalence frame. 

b) We prove F' satisfies property I. Write ^' for Hi^i m ^'i- Suppose {c,xi, . . . ,Xm) ~' 
(d, 2/1, ... , ym) ■ Then for all i — 1 . . . m we have that Xi = yi, and there exist Ui e c and 
Vi d such that Ui Vi. Since c and d are equivalence classes of ^, it follows from the 
latter that ui ~ vi, and consequently that c — d. Thus, (c, xi, . . . , Xm) ~ (d, yi, . . . , ym)- 

c) We prove F' satisfies property D. Consider m tuples {ci,x\, . . . , x}^), . . . , (cm, x™, . . . , a;™) 
in W' . For each i — i . . . m let Ui be a world in cluster Ci. Since F has property D, there 
exists a world w such that w Ui for each i — 1 . . .m. Let c be the cluster containing w. 
Then, by construction, for each i = 1 ... to we have {c,x\,... , x™) {ci,x\, . . . , xl^) . □ 

2. The function p is a p-morphism from F' to F. 



Proof That the function p is surjective follows from property (2) of Corollary 3.1. 

Next, we show that p is a frame homomorphism. Consider two tuples {c,Xi,...,Xm), 
(d, 2/1, ... , ym) in W' such that (c, xi, . . . , Xm) ~i (d, yi, . . . ,ym) ■ Then there exists u G c and 



V £ d such that u '^i v. By property (1) of Corollary 3.1, we have p{{c, Xi, . . . , Xm)) ~i u cind 
p{{d, 2/1, ... , 2/m}) V. Since is an equivalence relation, it follows that p{{c, xi, . . . , Xm)) 
p{{d, 2/1, . . . ,2/m))- 

To show the backward simulation property, consider a tuple x = {c,Xi,..., Xm), cind assume 



p(x) ~i w for some world w of F. Let d be the cluster containing w. By Corollary 3.1(2), 
there exist yj for j ^ i su ch that if y — (d, 2/i, • • • yi-i,Xi, 2/i+i, • • • Ijm) , then p{y) = w. Since 
p(x) £ c by Corollary ^^(1), it is immediate that x ~^ y. □ 



□ 



This completes the proof of Theorem 3.2. Since we confine om' attention in this paper to the 



language £„, this result, together with Theorem 3.1, shows that the set of valid formulae for the 



class of full frames is the same as that for the class of hypercubes. Both sets of valid formulae are 
equal to the set of formulae valid on ED frames. We now set about attempting to axiomatize the 
latter. It turns out to be necessary to introduce one more class of frames in order to achieve this. 
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3.2 Weakly directed frames 



In order to axiomatize the class of ED frames, we need to introduce one more class of frames. The 
reason for this is that the directedness property does not naturally correspond to any formula of 
r 

Lemma 3.7 No modal formula corresponds to n- directedness. 



Proof Suppose the opposite and assume there is a formula <j) that corresponds to n- directedness. 
Consider two disjoint frames, F — {W, ^i, . . . , ^n) o,nd F' — {W , ^'i, . . . , where WClW — 0, 
such that both F and F' are n-directed. the frame F U F' — {W U W, ~i U . . . , ~„ U ~^). 
Since by assumption F \= (p and F' \= (j), it follows that F U F' \= (j). (This is because satisfaction 



of a formula of Cn at a world w depends only on worlds connected to w (Theorem 2.4). But, then 



(j) is valid on a frame which This is the opposite of what we assumed at the beginning. □ 

The problem here is rather superficial however. Any class of frames corresponding to a modal 
formula should be closed under disjoint unions. To address this problem, we define a slight 
weakening of the notion of directedness. We will show that the class of frames satisfying this 
weaker notion validates the same class of formulae. 

Definition 3.1 (Weak directedness) A frame F = {W,^i, . . . ,^n) is weakly directed when 
for all worlds wq, wi, . . . , w„ G W , if for each i = 1, . . . , n there exists j £ {1, . . . , n} such that 
Wo Wi, then there exists a world w such that Wi ~i w for each i = 1, . . . , n. 

That is, weak directness is like directedness in requiring the existence of a world w such that 
Wi w for each i — 1, . . . ,rt, but it does so only under the condition that the worlds Wi are 
each connected to some world through a single step through one of the relations ^j. We use the 
notation "WD" to refer to the property of weak directedness. Thus, we write, e.g., Tewd for 
the class of weakly directed equivalence frames. Clearly, every directed frame is weakly directed. 
Moreover, the class of weakly directed frames is easily seen to be closed under disjoint unions. 
Indeed, this class of frames turns out to be the smallest class of frames containing the directed 
frames that is closed under disjoint unions. We first note the following. 

Lemma 3.8 Every weakly- directed and connected equivalence frame is directed. 



Proof Suppose that F — (W, ^i, . . . , ~„) is weakly directed and connected. Let wi, . . . , Wn be 
any n worlds in W . We show that there exists a world w such that wi ~i w for each i = 1, . . . , n. 
Since F is connected, the worlds wi, . . . ,Wn are in the same connected component, and hence all 
connected to some world w' . Since F is an equivalence frame the relations are symmetric, so we 
may assume that for each i there exists a path directed from w' to Wi . We now claim that none of 
these paths need to be any longer than one step, for if so, we can reduce their length. For, suppose 
without loss of generality that the path from w' to wi involves more than one step. Write this path 
as w' ~i J u V . . .wi and write the remaining paths as w' w'2 ■ . .W2 to w' w'^ . . . Wn . 
Using weak directedness ( and an ordering of the worlds u,W2 ■ . . w^^ such that u occurs in position 
ji), we obtain a world w" .such that u w" and for each k ^ \ we have w'^. ^j^. w" for some jk. 
By symmetry of the relations, we obtain paths from w" to the worlds Wi. For k ^ I these paths are 
of the form w" w'j^ . . .wu and have the same length as the path connecting w' to Wk ■ For k = 1 
we have the path w" ^j-^ u ^j-^ v . . .wi, which can be shortened to w" ~ v . . .wi by transitivity 
of ^j-^ . This argument establishes that there exists a world w' such that for each i = \, . . . ,n we 
have w' Wi for some j. Since F is weakly directed, it follows that there exists a world w .such 
that Wi ^i w for each i = 1, . . . ,n. □ 

We obtain two consequences of this result. First, the characterization of the weakly directed 
frames claimed above. 
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Corollary 3.2 The class of weakly directed equivalence frames is the smallest class oj equivalence 
directed frames that is closed under arbitrary disjoint unions and isomorphism. 



Proof It is immediate from the definition that the class of weakly directed equivalence frames 
contains the ED frames and is closed under disjoint unions and isomorphism. To show that it 
is the smallest such class, we show that any weakly directed equivalence frame is isomorphic to a 
disjoint union of directed equivalence frames. For let F be weakly directed, and let W' be a subset 
of the set of worlds of F containing exactly one world from each connected component of F. For 
each w G W let F^ denote the connected component of F containing w. By Lemma \3.^ each F^ 
is directed. It is then possible to show that F is isomorphic to the disjoint union of the frames F^ 
as w ranges over W' . 

□ 



The second consequence of Lemma 3.S is the fact that the formulae of £„ validated by the 



weakly equivalence directed frames is the same as the set validated by the ED frames. 
Corollary 3.3 Tewd =£„ Ted 



Proof Since every ED frame is EWD, every formula valid on the EWD frames is valid on the 
ED frames. Conversely, suppose that (j) £ C„ is not valid on some EWD frame F. Then there 
exists a valuation vr and a world w such that M -ii/), where M = {F, tt) . Let be the 
connected component of M containing w and F^j the corresponding frame. Then is a directed 



equivalence model, and by Theorem 2.4 we have —icf). Consequently, (p is not valid on the 



ED frame F^. □ 

This result, together with the results of the preceding sections, enables us to focus, in our 
quest for an axiomatization of the full systems and hypercubes, on the class of weakly directed 
equivalence frames. 



4 Axiomatization 

We are now ready to present an axiomatization of the full systems and hypercubes with respect 
to £„. The basis for the axiomatization will be the property of weak directedness identified in the 
previous section. 

For convenience, we first introduce some notation and terminology. We will write 5*0 for the 
formula Vi=i n ^i't'- Note that M S(j) if there exists a world w' such that M |=^' (p and 
w ~i w' for some i. Intuitively, S(f> asserts that at least one of the agents 1, . . . ,n considers (j) 
possible. 

For each i — 1, . . . , n, we also define a formula to be i-local if it is a boolean combination of 
formulae of the form O^cj). Intuitively, an i-local formula expresses a property of agent j's state of 
knowledge. More precisely, we have the following fact, which may be proved by a straightforward 
induction. 

Lemma 4.1 Let (p be an i-local formula in £„, let M be an equivalence model on n agents, and 
let w and w' be two worlds of M with w w' . Then M (p if and only if M ^u,/ (p. 

We analyze extensions of S5„ with respect to the axiom schema: 

I /\ S(b^] ^ SS I /\ cpA WD 

\ i— l,...,n / \z— l,...,n / 

where each (pi is required to be an i-local formula. There is a close relationship between this axiom, 
the property of weak directedness and the property defining full systems. Intuitively, the axiom 
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states that if there are n worlds (each reachable in a single step from the present world) , such that 
the i-th world is one in which agent i is in a state of knowledge described by <^i, then there exist 
a single world (reachable in two steps from the present) that realizes these n states of knowledge. 
This intuitive relationship may be made precise by the following correspondence result: 

Lemma 4.2 For equivalence frames F , we have F \= WD if and only if F is weakly- directed. 

Proof We first show that if F is a WD frame then F |= WD. For, suppose that tt is an 
interpretation of F and wq a world of F such that {F^tt) \=wo (Ai=i n^^'i)- Then for each 
i = 1, . . . ,n there exists a world Wi such that wq Wi for some ji and {F,Tr) \=wi 4>i- Sin ce F 



is weakly directed there exists a world w such that Wi w for each i — 1, . . . ,n. By Lemma ^ 
we have (F, tt) Ai=i....,„ Since wq Wi ~i w, it follows that {F,tt) SS f\^^-^^^ ^^(pi. 
This establishes F |= WD. 

Conversely, suppose F \= WD. We show that F is weakly directed. Let wq,wi, . . . ,Wn be 
worlds of F such that for each i — 1, . . . , n there exists ji such that wq ^j. Wi. We need to show 
that there exists a world w such that Wi w for each i — 1, . . . ,n. To achieve this, let pi, . . . ,pn 
be n distinct propositions and define the interpretation tt by pi G 7r(u') if and only if w Wi, 
for each i — 1, . . . ,7i. (The interpretation tt may be defined arbitrarily on all other propositions.) 
Note that we have (-F, tt) \=wo Ai=i n^^^P^- Since F \= WD, and each formula O^p^ is i- 
local, it follows that {F,Tr) \=wo SS /\^^^ ^ ^iPi- In particular, there exists a world w such that 
(F, tt) \=tj^ Ai=i n^iPi' hence (f , tt) Ai=i nPi- ^"^^j definition of tt, this means that 
Wi ~i w for each i — 1, . . . ,n, as required. □ 

The correspondence result above strongly indicates that the axiom WD can serve as a basis 
for an axiomatization of the weakly directed equivalence frames. We now establish that this is 
indeed the case. The proof will be by means of a standard technique for completeness proofs in 
modal logic, namely the construction of a canonical model. We now briefly review this technique 



to fix the notation, but refer the reader to |Che8C, HC84| for details 



A logic L consists of a derivability relation h ^ typically defined inductively using a basis of a 
set of axioms and closing under a set of inference rules. Given a logic L, a set of formulae F is 
L -inconsistent if there are formulae ai, . . . , G F, such that h/^ ~'(ai, . . . , ctm), and L-consistent 
otherwise. A set of formulae F is maximal if for every a of the language either a 6 F or -la G F. 
Under appropriate conditions, it is possible to prove that every L-consistent set admits a maximal 
i-consistent extension. 

Given a multi- modal logic L, the canonical model — {W, . . . , tt) is a model for the 
logic L, built as follows. The set W is made of all the maximal i-consistent sets of formulae, Ri is 
a family of relations on defined by wRiw' if Va (n^a G w implies a € w'). The interpretation 
TT for the atoms is defined as p G tt{w) ii p £ w. For normal modal logics L that are "compact" in 
the sense that all rules of inference have a finite number of antecedents, the canonical model has 
the property that \^ (f> if and only if h/, 4>. 

A logic L is sound with respect to a class of frames if </> implies \= (p. A logic L is 
complete with respect to a class of frames J- if T \= (j) implies I~l </>. Some logics are not only 
described by the canonical model but also by the frame of the canonical model, called the canonical 
frame. It can be proved that completeness of a logic L with respect to a class of frames T holds 
if the frame of the canonical model is in JF. Define the logic S5WD„ to be the logic obtained 
from S5„ by adding the axiom WD. It is possible to prove its completeness with respect to EWD 
frames. 

Theorem 4.1 The logic S5WDn is sound and complete for Cn with respect to the class of EWD 
frames. 



Proof Soundness follows from what was proved in the first p art of L emma {.i. and the fact that 



all axioms and rules of S5n are sound for equivalence frames [ HM9C /. To prove completeness we 
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use the canonical model technique. It is easy to show that the frame F^P^^" = {W,Ri,..., Rn) 
of the canonical model for S5WDn is reflexive, symmetric, and transitive with respect to the n 
relations. We prove it is also WD. 

Suppose that wq, wi, . . . , Wn are worlds of p^^^^" such that woRj-Wi, for i — 1, . . . ,n. Con- 
sider the set 

n 

r= \J{(j) : n,(j)ew^}. 

i=l 

We show that T is S5WDn-consistent. It then follows by the maximal extension theorem that there 
is a maximal S5WDn- consistent extension w, which satisfies WiRiW by construction. This will 
establish that the frame is WD. To show T is S 5 WDn- consistent, we assume it is not S5WDn- 
consistent and obtain a contradiction. It follows from the assumption that for each i = 1, . . . , n 
there are formulae a\, . . . , al^., with Oj^a\ G Wi for each j — 1 . . . mi, such that 



"S5WD„ 



i(a} A • • • A al^^ A • ■ • A a" A • ■ • A ) 



Let us now call ai = K^l^d^y Note that by S5n reasoning, we have O^ai G It follows that 
Oj-D^ai G Wq. (For else, Dj.^diai G Wq, hence -lO^ai G Wi, contradicting consistency of Wi.) 
By propositional logic we obtain SOiai G wq- Thus, Ai=i „ ^D^ai G wq. Now the formulae 
Oiai are i-local, so using WD it follows that SS{/\^^^ „ ^iCti) G wq. By S5n reasoning we get 
SS{Ai=i n'^i) S ^0- But by S5n reasoning and the fact that Hs5WD„ ~'Ai=i n'^i ^^^^ leads to 
the conclusion that wq is inconsistent. This is the contradiction promised. □ 

Applying the equivalences with respect to £„ established previously, we also obtain soundness 
and completeness with respect to several other semantics. 

Corollary 4.1 The logic S5WD„ is sound and complete for C„ with respect to 

1. the class of full systems 

2. the class of hypercube systems 

3. the class of EDI frames 

4. the class of ED frames 



With Corollary 4.1 we have the axiomatization of full systems and hypercubes systems that 
we aimed for. We remark that it can be shown that several other axioms could be used for this 
result instead of WD. For example, an analysis of the proofs of both the correspondence and 
completeness results reveals that the axiom 

-l,...,n / \i— l,...,n 

(where the are not required to be i-local) also suffices. This is not surprising, since for any 
j-local formula (j) it can be shown that ip Dif/) is S5„-valid. 

While the axiom WD is compact when expressed using the operator 5, it is quite lengthy when 
expanded and involves considerable use of disjunction. It is possible to show that WD may be 
replaced by certain other axioms which are less symmetrical, but which state interactions between 
the agents' knowledge of a syntactically simpler form than the expansion of WD. For a discussion 
of a number of alternative axioms that can be shown to be equivalent to WD, we refer the reader 



to the thesis of Lomuscio |Lom99 . One such alternative, for the case n = 2, has appeared in the 



literature before, as the axiom 



due to Catach ||Cat88| , also discussed in |Pop94 
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Theorem 4.2 WD in the case n = 2 is S^2- equivalent to Catach's axiom. 

Proof // n = 2 then WD is 

{Ol(l>lV02(t)l)A{Ol(f>2V02(f>2)^ V Oi'^3i^i^(l>2) 

ije{l,2} 

(with i -local). 

WD to Catach: Put 0i = Di^p and (j)2 = ^2P (note that these are 1-local and 2-local respec- 
tively). WD now becomes 

(OiDi^p V 02^\-^p) A (OiDap V 02n2P) ^ -L. 

ATow we drop the disjuncts OiDi-ip and O2O2P (this strengthens the antecedent and hence weakens 
the whole formula) to obtain as a consequence 

02ai^p A Oin2P ±, 

which can be simply rearranged to obtain O1CI2P => 0201^ as required. 
Catach to WD; From Oin2P □2O1P we want to obtain 

(Oi<^iVO2<^i)A(Oi.^2VO202)=> V OiOj('/'i/\'^2) 
in the case that the are i-local. Since the <pi are i-local, we have <^ Assume 

{OlU-^cj)-^ V <>2^l(l}l) A {OlU2(l)2 V O2a202) 

which, on distribution, is 

(OiDi^i A OiU2(j)2) V (Oini</.i A O2n202) V (02ni(/)i a OiU2(t)2) V (OaOi./)! A 020202) 

From each of these disjuncts, we will derive either OiO2(0i A (/>2) or ^2^i{4'i A 4>2), thus proving 
WD. The derivations are as follows: 

1. From {<>iUi(j)i A C'iU2<b2), apply Catach's axiom together with uniform substitution to the 
second term to obtain (OiDi^i A 0201(62). Use the 5'5„ axiom,s OiDi-i/; ^iip md 
□2O1V' ^ Oiip to obtain Die/)! A Oi(j)2. From this we deduce Oi(0i A (/>2) and from the 
axiom T: p ^ O2P and substitution we obtain C'20i{(f>i A (f)2). 

2. From {<>iDi(j)i A0202(j)2): the first conjunct gives Oi<pi, then<pi, then<>24>i by Sbn axioms. 
The second conjunct gives □2?!'2; so putting them together we have 024>i A ^2^2, from which 
we obtain <>2{^i A ^2) as a consequence, and hence Oi<>2{(j>i A (j)2)- 

3. From (02ni(/'i AOin2<i>2), we obtain □i02(/'i AOin2(^2 by applying Catach to the first term. 
This now implies C>i(O20i A □2<?i'2), which in turn im,plies Oi02((/'i A (j)2). 

4. From (02ni^iii A 02n2'/'2)- this case is similar to the first one. 

□ 

5 Decidability 

We now prove that the logic S5WD„ is decidable. In order to do that we prove that the logic has 
the finite model property. 

Definition 5.1 A logic L is said to have the finite model property (or fmp in short) if for any 
formula (j), \/l (j) implies that there is a finite model M for L such that M ^ ^. 
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A logic can be proved to have the fmp in a number of different ways: algebraically as in 
|McK41|, |Ber49 , by the use of a "mini-canonical" model as in [HC96], etc. Here we use the 
another standard technique which is better suited for this case: fiUrations (first presented in 
[ Lem77f ). 

The idea of filtrations is the following. If a logic is complete, we know that if a formula cj) is a 
non-theorem of L (i.e. if -'4> is L-consistent), then (/> is invalid on some model M for L. The model 
M might be infinite. Filtrations enable us to produce a model M' from M, such that M' is finite. 
If we can further prove that M' is also a model for L, then we have proved that the logic L has 
the finite model property. 

We formally proceed as follows. Given a formula 0, define the set $0 to be the set of formulae 
a that are either a sub-formula of or the negation of a sub-formula of (/). The set $0 is obviously 
finite for any formula (j). 

Definition 5.2 Let M be a model. Two worlds w,w' of AI are equivalent with respect to $0 
(denoted w =$_^ w' , or simply w = w' if it is not ambiguous), if for every a € $0, we have 
M a if and only if M a. 

We can now define filtrations as follows. 

Definition 5.3 Given a formula 4> md a model M = (W, . . . , i?„, tt), a filtration through 
is a model M' = {W , R'l, . . . , R'^, tt') satisfying the following three properties: 



• W' — Ty/=$_^, where =$_^ is the equivalence relation defined as in 5.1. 

• For each i £ A, the relation R[ is suitable, i.e. it satisfies the two properties: 

1. For all [wi], [W2] € W , if there exists u & W such that wiRiu and u = W2, then 
[w,]Ri[w2]. 

2. For all [wi], [W2] S W , if [wi]R'^[w2] then for all formulae a such that O^a G if 
M \^wi then M a. 

• For any p G Atoms, p € 7t'{[w]) if and only if p G tt{w). 

Note that a model M' satisfying these conditions must be finite since is finite, so the number 
of equivalence classes under =$_^ is finite. Indeed, the number of worlds in M' is at most 2l'^l, 

It can be proved by induction (see for example |IIC84| page 139) that suitability of the relations 
i?- guarantees the validity of the following: 

Theorem 5.1 Given a model M, and any formula cj), a filtration M' of M through $0 has the 
property that for any point w £ W and and for any formula a G we have M' \^[w] Oi if and 
only if M a 

We now proceed to the case of interest here: the logic S5WD„. Consider the canonical model 
M for S5WD„. We know (see Theorem 4.1) that M is a weakly directed equivalence model. By 
Lemma 3.8, the model generated by any point of M is directed. Consider any formula (j). We 
consider the model M' defined as follows: 

Definition 5.4 Given a model M and a formula 4> define the model M' = (W',^'i, . . . ,~^,7r') 
by 



• W' = W/=^^, where is the equivalence relation defined by Definition 5.i. 

• [wi] [W2] if for all formulae a such that U^a G we have M \^wi ^iOi if and only if 

• For any p G Atoms, we have p G 7r'([K7]) if and only if p G 7r(w). 



Ind eed the model M' defined by Definition 5.4 is a filtration as the following shows (stated in 



[ EIC84[| page 145 for the mono-modal case) 
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Lemma 5.1 Given an equivalence model M and a formula (f>, the model M' as described in 
Definition 5.4 is a filtration of M through $0. 



Proof All we need to prove is that the relations ^[ are suitable. 

Property 1. Consider worlds [wi], [w2\ G W and world u £W such that wi ~i u and u = W2. 
We need to prove that [wi] [w2\, i.e. that for all formulae a such that O^a € (f>0t/;e have 
M \=wi ^iCt if and only if M \^W2 ^iCt- We prove it from left to right; the other direction is 
similar. Note that M \^wi ^iOi if and only if M \=wi '^i^iOi because M is an equivalence model; 
but Wi u and so AI ^iOi. But DiO; S and W2 = u, so M \=W2 ^iOij which is what we 
wanted to prove. 

Property 2. Consider worlds [loi], [102] G W such that [wi] [^2]- This means that for all 
□ itt G we have M \=wi ^iOi if and only if M \=W2 ^iOi- Since M is an equivalence model it 
follows that M \=W2 ct- ^ 

We now prove that the filtration defined above produces models for S5WD„. We first consider 
the effect of the filtration on directed models. 



Lemma 5.2 If M is an equivalence directed model, then the model M' defined in Definition 5. 
is also an equivalence directed model. 



Proof We prove that F' — (ly , . . . , is an ED frame. The relations ^[ are clearly 
equivalence relations. All it remains to show is that F' is directed. To do that, consider any 
[wi], . . . , [wn] € W . Since M is directed, there exists w €W such that wt ~i w for i ~ 1, . . . , 71. 
But each ^[ is suitable and so, by a consequence of property 1 of suitability we have that [wi] ~^ [w], 
for i — 1. . . . , n. Therefore the frame F' is directed. □ 

We are finally in the position to prove fmp. 

Theorem 5.2 The logic S5WD„ has the finite model property. Indeed, every formula (j) with a 
countermodel has a countermodel with at most 2l'^l worlds. 



Proof Suppose \f <j). Since by the proof of Theorem ^.1 the logic S5WD„ is canonical, the canon- 
ical model M — (W, ^1, . . . , tt) for S5WD„ is an equivalence model, it is weakly- directed and 
there is a point w G W , such that M \=yg ^(j). Consider the model generated by w. By 
Theorem 2.4, we have The model is clearly an equivalence model and, since it 

is connected it is also directed, by Lemma | 

by Lemma\5.^, 

Theorem 



according to Definition 5.. 



Consider now the filtration M' of through $0 
M' is an equivalence directed model and it is finite by 
But M' is a filtration, and by 



construction because $0 is a finite set 
which is what lue needed to prove. The bound on the size of M' follows from the observation above 



5.1, M' hi- 



□ 



Corollary 5.1 The logic S5WD„ is decidable. 



Proof By Theorem 5.1, to check that (p is valid, it suf 



uffices to check that 



termodel with at most 21"^! worlds. 



has no coun- 
□ 



Theorem 5.2 is similar to a known result [HM92] for the logic S5r 
size countermodel also exists for every formula with a countermodel 



for which an exponential 
(In the case of S5, there 
exists a linear size model [LR77]). We will leave open the exact complexity of S5WD„, but note 
that whereas the logic S5 is NP-complete [LR77|, the logic S5„ is known to be PSPACE-complete 
|HM92]. The upper bound for S5 is direct from the existence of a linear size model, but it can 
be shown that, in a precise sense, this technique does not work for S5„. Instead, the proof of the 
upper bound in the case of S5„ is by means of a tableau construction. We will not attempt here 
to develop a similar construction for S5WD„. 
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6 Homogeneous broadcast systems 



Hypercubes were motivated above as an appropriate model for the initial configuration of a multi- 
agent system, in which all agents are ignorant of each other's local state. In this section we 
will show that for a particular class of systems, homogeneous broadcast systems with perfect 
recall, hypercubes are also an appropriate model of the states of knowledge of agents that acquire 
information over time. In this class of systems, all communication is by synchronous broadcast, 
agents have perfect recall, and the agents' knowledge in the initial configuration is characterized by 
a hypercube system. We establish that in such systems, the agents' knowledge can be characterized 
by a hypercube system not just at the initial time, but also at all subsequent times. It follows 
from this result that the logic of knowledge in homogeneous broadcast systems can be axiomatized 
by the logic S5WD„ studied in the previous section. Thus, the applicability of hypercubes as a 
model of agents' knowledge extends beyond initial configurations. 



This section is organized as follows. In Section 6.1 we describe environments, a general model 
for the behavior of agents and their interaction. This model may be used in a variety of ways to 
ascribe a state of knowledge to the agents after a particular sequence of events has occurred. We 
focus here on just one of the possibilities, in which it is assumed that agents have perfect recall 



of their observations. In Section 6.2, we define broadcast environments, a special case of this 



general model that constrains all communication between agents to be by synchronous broadcast. 



Section 6.3 considers the special case of homogeneous broadcast environments, establishes the 



connection between the systems generated by these environments and hypercubes. 
6.1 Environments 



In the model of Halpern and Moses | HM90 1 , a distributed system corresponds to a set of runs , where 
each run constitutes a history that identifies at each point of time a state of the environment and a 
local state for each agent. This model is perhaps overly general, since in practice one is interested 
in the particular sets of runs that are generated by executing a given program, or protocol, within a 
given communication architecture. A formal framework to capture this idea, contexts, was defined 



by Fagin et al. |FIIMV97, FIIMV95|. In this section we briefly recall a variant of this framework, 
environments, from | Mcy96b| ~ (We refer the reader to |Mey96t, FIIMV95| for more extensive 



motivation and examples.) Compared to contexts, environments admit an additional degree of 
freedom by allowing knowledge to be interpreted in different ways in the same set of runs. We 
focus here on a particular interpretation, based on the assumption that agents have perfect recall. 
We describe how executing a protocol in an environment with respect to an interpretation of 
knowledge determines a Kripke structure that ascribes a stat e of knowledge to the agents after 



the occurrence of a particular sequence of events. In Section x2, we will present a special case 
of this model that defines a particular architecture in which agents communicate by synchronous 
broadcast. 

For the definition of environment, we assume a set A = {0, 1, ... , n} of agents. We also assume 
that for each agent i G A, there is a non-empty set ACTi, representing the set of actions that may 
be performed by agent i. A joint action is defined to be a tuple (ao, . . . , a„) G ACTq x • • • x ACTn. 
We write ACT for the set of joint actions. As before, we assume a set Atoms of propositional 
variables of the language. 

In the following definitions, agent will play a role somewhat different from the other agents. 
Intuitively, it is intended that agent be used to model aspects of the context, or communication 
architecture, within which the other agents operate. The actions of agent correspond to nonde- 
terministic behavior of this context. In applications of the framework, the architecture is typically 
fixed, and one is interested in designing programs for the behavior of agents 1 . . .n. 

Definition 6.1 (Environment) An interpreted environment is a tuple of the form E = {S,I,Po, 
T,0,V) where the components are defined as follows: 

• S is a set of states of the environment. Intuitively, states of the environment may encode 
such information as messages in transit, failure of components, etc. 



21 



• I is a subset of S, representing the possible initial states of the environment. 



Pq : S ^ 'P{ACTo) is a function, called the protocol of the environment, mapping states 
to subsets of the set ACTq of actions performable by the environment. Intuitively, -Po(s) 
represents the set of actions that may be performed by the environment when the system is 
in state s. 

T is a function mapping joint actions j G ACT to state transition functions tQ) : S S . 
Intuitively, when the joint action j is performed in the state s, the resulting state of the 
environment is T(j)(s). 

O is a function from S to O" for some set O. For each i = 1, . . . ,n, the function Oi mapping 
s S to the ith component ofO{s), is called the observation function of agent i. Intuitively, 
Oi{s) represents the observation of agent i in the .state s. 

V : S X Atoms — > {0,1} is a valuation, assigning a truth value V{s,p) in each .state s to 
each atomic proposition p £ Atoms. 



A trace of an environment E is a finite sequence sq • ■ • Sm of states such that sq G I and for 
all fc = . . . m — 1 there exists a joint action j = (ao, ai, . . . , a„) such that Sk+i = T(j){sk) and 
flo e Po(sfc)- We write fin{r) for the final state of a trace r. 

Intuitively, the traces of an environment correspond to the finite histories that may be obtained 
from some behavior of the agents in that environment Note that the nondeterministic choices 
of action made by the environment itself are constrained by the protocol of the environment, and 
that these choices are determined at each step from the state of the environment. On the other 
hand, the notion of trace assumes that the choices of action of agents 1 . . . n are unconstrained. In 
practice, we wish these agents to behave according to some program (perhaps nondeterministic), 
that determines their choice of next possible action as some function of the observations that they 
have made. The following definition captures this intuition. 

Definition 6.2 (Perfect Recall) The perfect recall local state of agent i = 1 . . .n in a trace 
r — sq . . . Sm, denoted {r}i, is defined to be the sequence Oi(so) • • • Oi{sm) of observations made 
by the agent in the trace. 

A perfect recall protocol for agent i ~ \ . . .n is a function Pi mapping each sequence of 
observations in O* to a non-empty subset of ACTi. A joint perfect recall protocol is a tuple 
P = (Pi, . . . , Pn) consisting of a perfect recall protocol Pi for each agent i = I . . .n. We write P,; 
for Pi when P is given. 

Protocols specify the possible choices of next action of the agents, given a certain history of 
events, as follows. For each agent i = 1 . . . n, we say that an action Ui G ACTi is enabled with 
respect to a protocol P at a trace r of i? if a.; e Pi{{r}i). An action oq of the environment is 
enabled at r if ao G PQ{fin{r)). A joint action is enabled at r with respect to a protocol P if each 
of its components is enabled at r. 

We obtain the traces that result when agents execute a joint protocol in an environment as 
follows. Define a trace sq . . . Sm of E to be consistent with a joint protocol P if for each k < m, 
there exists a joint action j enabled at so • ■ • Sfe with respect to P, such that T(a)(sfc) = Sk+i- We 
are now in a position to describe the frame that captures the agents' states of knowledge when 
they execute a protocol in an environment. 

Definition 6.3 (Perfect recall frame derived from a protocol and environment) Given 
an environment E and a joint protocol P, the perfect recall frame derived from E and P is 
the structure Fe,y> = {W, ^i, . . . , ^n), where: 

^One could also define runs of the environment, which are infinite sequences of state s satisfyin g- the same 



constraint on state transitions. This would correspond more closely to the framework of |FHMV95|. Runs are 



essential when one is interested in languages containing temporal operators, but there is a precise sense in which it 



suffices to work with trt 



the appendix of |vdM98| 



,ces when only modal operators for knowledge are of interest, as in the present paper. See 
for a discussion of this issue. 
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• W is the set of all traces of E consistent with F, 

• is the binary relation on W defined by r r' if {r}i — {r'}i, for each agent i = 1 . . .n. 

Intuitively, because W contains only traces of E consistent with P, this frame encodes the 
assumption that it is common knowledge amongst the agents that the environment in which 
they are operating is E and that the protocol they are running is P. Moreover, the accessibility 
relations ~i expressing agents' knowledge are defined in a way that corresponds to assuming that 
agents have perfect recall of their observations. The relations could have been defined in many 
different ways: for example, it is meaningful to consider instead the relations ~i defined by r «i r' 
if Oi{fin{r)) — Oi{fin{r')). This would correspond to the assumption that agents are only aware 
of their most recent observation. The assumption of perfect recall we work with in this paper is 
frequently made in the literature because it amounts to assuming that agents make optimal use of 
the information to which they are exposed. This assumption is essential for the derivation of lower 
bounds and impossibility results and the synthesis of optimal protocols [ HM9C , MT88 , HMW9C| ] . 



6.2 Broadcast environments 

In this subsection we define broadcast environments (BE), a special case of the formalism described 



in Section 3.1. Broadcast environments model situations in which all communication is by syn- 



chronous broadcast. Examples of this are systems in which agents communicate by means of a 



shared bus, by writing tokens onto a shared blackboard [Nii86 and in face to face conversation. 
Other examples are classical puzzles such as the wise men, or muddy children puzzle |MDH8^, 



and a variety of games of incomplete information, includin g battle ships, Stratego and Bridge 



Broadcast environments have been considered previously in [ Mey96a . 

To define broadcast environments, we need to impose a number of constraints on the compo- 
nents making up the definition of environments given in the previous section. We do so here in a 



way that slightly simplifies the model in |Mey96a|, eliminating some features that will be irrelevant 



in the context of homogeneous broadcast environments. The intuition we wish to capture is that 
each agent holds some private information, which is unobservable to all other agents. The actions 
taken by the agents will have two types of effects: they will update this private information, and 
simultaneously broadcast some information to all the other agents. 

The actions performed by agents in broadcast environments have two components: an internal 
component and an external component. The internal component of an agent's action will affect 
only the agent's private state, and will be unobservable to the other agents. On the other hand, 
the external component will be observable to all agents, but it will affect only the state of the 
environment. 

Assumption 6.1 (BE Actions) For each i — . . .n there exists a set Ai o/ external actions and 
a set Bi o/ internal actions. All the sets Ai contain the special "null" action e. For i = 0. . .n, 
the set ACTi of actions of agent i consists of the pairs a ■ b where a ^ Ai and b £ Bi. 

The role of the null action is to allow for a uniform representation of initial states (see Assump- 



tion |6.3| below). It follows from Assumption 6.1 and the definitions of the previous section that 



the set of the joint actions ACT in a broadcast environment consists of the tuples of the form 
j = (ao • bQ,ai ■ bi, . . . ,an ■ bn) where ai ■ bi G ACTi for each i = . . .n. We define a(j) to be the 
component (ao,ai,a2, . . . ,a„), and call this the joint external component of j. We write A for 
the set X ... X An of joint external actions. 

To represent the private information held by agents, we assume that for each agent i = . . .n 
there exists a set Si of instantaneous private states. Intuitively, for i = 1 . . . n the states Si 
represent the information observable by agent i only. In the case i = 0, the states Sq represent 
that part of the environment's state which is observable to no agent. 

Assumption 6.2 (BE States) The set of states S of a broadcast environment is required to 
consist of tuples of the form (oq, ... , a„;poi • ■ • ,Pn), where for each i — . . .n, the component 
Qi £ Ai is an external action of agent i and the component pi G Si is a private state of agent i. 
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Intuitively, a tuple (ao, . . . ,a„;poj--- tPu) models a situation in which each agent i is in the 
instantaneous private state pi, and in which is the most recent external action performed by 
agent i. We define the joint private state at s to be the tuple p(s) = (po, ■ ■ ■ ,Pn), and agent i's 
private state at s, denoted Pi(s), to be the private state pi. If s = (oq, . . . ,a„;poj • ■ ■ iPn) is a 
state then we define the joint external action at s, denoted a(s), to be the tuple (ao, . . . , an)- 

Clearly, in initial states it does not make sense to talk of a most recent external action. This 
motivates the following. 

Assumption 6.3 (BE initial states) The set of initial states I of a broadcast environment con- 
tains only states (ao, . . . , a„;po, ■ ■ • iPn) with Oi — e for all i — . . .n. 

The definition of broadcast environment allows the set / of initial states to be any nonempty set of 
states of this form. As we will see later, homogeneous broadcast environments restrict the possible 
sets of initial states. 

In a broadcast environment, agents are aware of their own private state, and also of the 
external actions performed by all agents. All communication between agents will be by means of 
the external actions. This constraint is model-led by the definition of the agents' observations. 

Assumption 6.4 (BE observations) For i = 1 . . .n, we require agent i 's observation function 
Oi to be given by Oi{{ao, ... , a„;po, • ■ • ,Pn)) = (ao, • ■ • , an;pi). 

That is, in a given state, an agent's observation consists of the external component of the joint 
action producing that state, and the agent's private state.Q 

It will be convenient in what follows to introduce an observation function for agent 0, sim- 
ilarly defined by Oo((aoi ■ ■ ■ , o,n',Po, ■ ■ ■ ,Pn)) = {o-o, ■ ■ • , o,n\Po)- Moreover, we obtain using this 
observation function an equivalence relation '~o on traces, defined exactly as the relations 

One of the effects of performing a joint action in a broadcast environment is that each agent 
updates its private state in a way that depends on its internal action and the joint external action 
simultaneously being performed. In addition to this, the joint external action will be recorded in 
the resulting state. 

Assumption 6.5 (BE transitions) For each agent i = . . .n there exists a private action 
interpretation function : A x i?^ — > (Si Si). The joint action interpretation function 
T : ACT (S ^ S) of a broadcast environment is obtained from the private action interpre- 
tation functions as follows. For each joint action j — (ao • feoi ■ ■ • ^o-n ■ bn), the transition function 
T(j) maps a state s — {oq, . . . ,a'^;po, . . . ,p„) to 



T 



= (oo, • ■ • ,an;To(a(j),5o)(po), • ■ • , T„(a(j), 6„)(p„)). 



That is, for each joint external action a G A and internal action bi G the function Ti{a.^bi) : 
Si Si is a private state transition function, intuitively representing the effect on agent i's private 
states of performing the internal action bi when the joint external action a is being simultane- 
ously performed. The state of the environment resulting from a joint action records the external 
component of the joint action, and updates each agent's private state using its private action 
interpretation function. 

Finally, we require that the protocol Pq of the environment depend only upon its private state 
and the most recent external action. 

Assumption 6.6 (BE protocol) If s and t are states with Oo{s) = Oo(i) then Po{s) = Pa{t). 

The propositional constants Atoms of a broadcast environment are allowed to describe any prop- 
erty of the global states S, so we do not make any assumption on the valuation V. 
We may now state the main definition of this section. 

Definition 6.4 (Broadcast environment) A broadcast environment is an environment satis- 
fying assumptions \6.f\ — [g.^ 



* This is a slight simplification of the definition in [ VIey96a ] , eliminating an extra component that is incompatible 
with homogeneity. 



24 



In broadcast environments, agents' mutual knowledge can be shown to have a particularly simple 



structure |Mey96a|. Intuitively, this is because broadcast communication maintains a high degree 
of common knowledge. The following section provides an illustration of this point in a special case 
of broadcast environments. 

Example 6.1 We illustrate the definitions so far by means of a simple card game. Let us imagine 



an initial situation set up as described in Example 2.1, and take n = 2. Thus each of the two players 



has 12 cards from the respective deck. The game now proceeds as follows: at each move, provided 
the hands are not empty, both players select a card from their hand, and place it face up on the 
table, where it remains until the next move, when it is returned to its deck, so that it is no longer 
visible. ( Of course, a player with perfect recall will remember what cards have been played.) The 
objective of the game does not concern us here (it may be to play a card with a value greater than 
that picked by the opponent, for example). Note that the players play in parallel (synchronously) . 
We model this game as a broadcast system together with a joint protocol. 

The private states of agent i> \ are now of the form h C D, where D is a deck and h is a set 



of 12 or fewer cards. As in Example 2.1, we will consider two modelings for the private states of 
agent 0. The first modeling, which we call the simple modeling, takes the states of the environment 
to be the singleton set {!}. This is appropriate when we wish to analyze the players' knowledge 
about each other's hands. If we also wish to consider the players' knowledge about the cards in 
the respective decks, then we use the rich modeling, in which we take agent 's private states to be 
tuples {Di, D2, fi, f2) , where Di <Z D represent the cards in the i-th deck, as before, and fi d D 
contains at most one card, the card most recently placed face up by player i. (In the initial states, 
we will have fi empty.) 

In this example, the environment is passive, so we may take the actions of agent to consist 
of the single pair e • e only, and for each state s the environment's protocol returns ^o(s) — {e • e}. 
All the actions of the remaining agents are observable, so we may take the set of internal actions 
Hi to be {e} in each case, and the set of external actions Ai to be equal to the set of subsets of D 
with at most one element. Intuitively, c G Ai corresponds to the action of playing the cards in c, 
so an empty set represents the action of playing no card. Thus, the set of joint actions is the set 
of tuples of the form 

j = (e • e, ci • e, C2 • e) 

where Ci, C2 & Ai, and the corresponding joint external action has the form a(j) = (e, ci, C2). 
Given the above, we also see that a state of the system is a tuple of the form 



s = • e, ci • e, C2 • e; po,hi,h2 

where, for i — 1,2, we have that a d D is a set of cards with at most one element, and hi 
is a set of twelve or fewer cards. In the simple modeling we have po = 1; in the rich modeling 
Pq = (-Di, D2, /i, 72), where each set Di <Z D is a set of cards, and fiCDisa set of cards with at 
most one element. (In the latter case, not all such states are reachable: for example, we will have 
fi = Ci in all reachable states.) 

The observation of agent i ~ 1,2 in a state of one of the above forms is Oi{s) — (e, ci, C2; hi). 
Note that we model observability of the card face up through the agent's observation of the last 
action, since agents are assumed incapable of observing the private state of agent directly. If an 
agent i = 1,2 makes a sequence of observations a, then its final observation will have hi equal to 
its current hand. Thus, we may define the protocol of each agent, representing its choice of card 
at each move, by Pi{(j) = {{c} | c G hi} if hi is not empty, and Pi{o') = {0} otherwise. 

Transitions are given as follows, for states and joint external actions as above. For agent 0, 
we clearly have To((e, ci, C2), e)(l) — 1 in the simple modeling. In the rich modeling, 

To((e,Ci,C2>,e)((i5l,...i?2,/l,/2)) - (^lU/i,i?2U/2,Ci,C2). 

For agent i — 1,2, we take 

ro((e, ci, C2), e)(/ij) = ft-i \ Ci. 
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The initial states of the system are the states 



• e, • e, • e; po, hi, h2 ^ 
where for i = 1,2 we have hi and /i2 equal to sets of exactly 12 cards. In the simple modeling, 



we have p^ = 1, and, as noted in Example 2.1, this set of states forms a hypercube. In the rich 
modeling, we have po = {D \hi, D \h2,^,%) . As we noted previously, this set of states is a full 
system, but not a hypercube. 

In the sequel, we will make use of the following observation. 

Lemma 6.1 Suppose E is a broadcast environment, and P is a joint perfect recall protocol. Let 
r and r' be traces of E consistent with P such that r r' , where « € {0 . . .n}. Then every action 
of agent i that is enabled at r is also enabled at r' . 

The proof is immediate from the definitions. (In the case of agent 0, note that r r' implies 



Ooir) = Oo{r') and use Assumption 6.6. 



6.3 Homogeneous broadcast environments 

Homogeneous broadcast environments are a special case of broadcast environments. These envi- 
ronments satisfy the additional, and quite natural, constraint that agents start in a condition of 
ignorance about each others states, and the state of the environment. Thus, their initial state of 
knowledge is characterized by a hypercube system. We will show that, under the assumption that 
agents have perfect recall, their knowledge can also be characterized as a hypercube system at all 
subsequent times. 

Definition 6.5 (Homogeneous broadcast environment) A broadcast environment E is ho- 
mogeneous if there exists for each agent i — . . .n a set T C Pj o/ initial private states, such that 
the set of initial states I of the environment E is the set of all states (e, . . . , e;poi ■ • -Pn), where 
Pi G h for z = ... 71. 

In other words, the set of initial states is isomorphic to the hypercube /q x . . . x /„. That is, agents 
are initially ignorant of each others' states and the state of the environment. The environment in 



Example 6.1 is a homogeneous broadcast system under the simple modeling (but not under the 
rich modeling.) Of the other examples mentioned in the previous section, battleships and Stratego 
satisfy this constraint, but the wise men puzzle, the muddy children puzzle and Bridge do not. 
(For example, the initial configurations of Bridge, i.e. after cards have been dealt but before 
bidding, do not form a hypercube because it is not possible for two players to simultaneously hold 
the same card.) 

We may now introduce the main object of study in this section. 

Definition 6.6 (Perfect recall homogeneous broadcast frame) A perfect recall homogene- 
ous broadcast frame is any frame Fe,f obtained from a joint perfect recall protocol V in a homo- 
geneous broadcast environment E . 

We are now in a position to state the main result of this section. 

Theorem 6.1 Every perfect recall homogeneous broadcast frame is isomorphic to a frame obtained 
from a disjoint union of systems of the form x Xi x . . . x Xn . In particular, every such frame 
is weakly- directed. 

This result establishes a close connection between perfect recall homogeneous broadcast frames 
and hypercube systems. In particular, it follows that the logic S5WD„ is sound for this class of 
frames. 
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For the proof, it is convenient to introduce the following notions. If r = sqSi . . . Sm is a trace 
of a broadcast environment, we will write a(r) for the sequence a(so) • • ■ a-(sm) of joint external 
actions performed in r. If s = (oq, ... , a„;po, . . . ,p„} and t = (ao, ... , a„; goi ■ ■ • ^Qn) are global 
states with the same joint external action component, and i e {0 . . . n}, define s txi^ i to be the 
state (ao, . . . , a„;po: ■ ■ • iPi-ij QitPi+Ij ■ ■ ■ iPn), that is like s except that agent i has the private 
state it has in t. 

Note that for j ^ i, we have Oj{s [xii t) — (ao, . . . ,a„;pj) = Oj{s). Additionally, Oi{s ixi^ 
t) = (ao, . . . , a„; qi) = Oiit). More generally, if ri = sqSi . . . Sm and r2 — toti . . .tm are sequences 
of states of the same length with a(ri) = a(r2) then we define ri Xii r2 to be the sequence 
(so ixii to)isi ixii ^i) • • ■ (sm ixij trn) ■ Thc foUowing rcsult states a closure condition of the set of 
traces of a homogeneous broadcast environment. 

Lemma 6.2 Let E be a homogeneous broadcast environment, and P a joint perfect recall protocol. 
If ri and r2 are traces in Fe.p with a(ri) = a(r2) then for any i we have that ri ixi^ r2 is a trace 
in Fe^p with (ri iXi r2) r2 and for j ^ i we have that (ri ixi^ r2) ~j ri. 



Proof Note that a(r) — a(r') implies that r and r' have the same length. It is immediate from 
the comments above that (ri ixi^ r2) ~j ri for j ^ i and (ri ixi^ r2) r2. It therefore suffices to 
show that ri 1X1^ r2 is a trace. We do this by induction on the length of the trace ri . 

The base case is straightforward. If ri is a trace of length one, then it consists of an initial 
state si. Similarly, r2 consists of an initial state S2. It is immediate from the assumption that 
I — {(e, . . . , e)} X Iq X ■ ■ ■ X In that ri r2 = si txii S2 is a trace. 

Assume that the result has been established for traces of length m, and consider traces ri and 
f2 of length m + 1 with a(ri) — a-(''2)- Write ri — r[siti where ti is the final state of ri and 
si is the next-to-final state of ri, and similarly write r2 = r'2S2t2- By the induction hypothesis, 
r = r'lSi Dx]^ r2S2 is o, trace indistinguishable to agent i from r'2S2, and indistinguishable to all 
other agents from r'lSi. 

Let ji be a joint action enabled at r'lSi such that ti = T(ji)(si), and similarly, let j2 be a 
joint action enabled at r'2S2 such that t2 — T(j2)(s2). Note that because state transitions record 
the joint external action component of a joint action in the resulting state, and because a(ri) = 
a(r2), we have a(ji) = a(ti) = a(i2) = ^ih)- Write (ao, . . . ,a„) for the common joint external 
action of these states and joint actions. Then we may also write ji ~ {oq ■ bo, . . . , a„ • 6„) and 
32 = (do • Co, . . . , a„ • c„). To show that ri Mi r2 is a trace we show that the joint action 

j = (flo • ^0, ■ • • , ftj-i • bi-i, o-i ■ Ci, Qi+i ■ ... , a„ • bn) 

is enabled at r and satisfies T(j)(si cxi^ S2) — ti [x]j t2. 

To show that j is enabled at r we show that each of its components is enabled at r. In the case 
of agents j ^ i, we need to show that the action Oj ■ bj of agent j is enabled at r. This follows, 
using Lemma 6.1, from the fact that Oj ■ bj is enabled for agent j at r'lSi, and from the fact that 



r'lSi r. For agent i, we need to show that the action ai ■ Ci is enabled at r. This follows, again 
using Lemma \6. \ , from the fact that Oi ■ Ci is enabled for agent i at r'2S2, and from the fact that 
r^S2 r. 

It therefore remains to show that T(j)(si ixSi S2) — ti cOi ^2- Note first that a(r(j)(si tXi S2)) — 
a(j) = a(ji) — a(ii ixi^ t2). Thus, the states T(j)(si ixi^ 82) and ti ixi^ t2 record the same joint 
external action. We show that they also have the same private state for each agent. In case of 
agents j ^ i, we have 

Pi('r(j)(si cXi S2)) = Tj-(a(j),6j)(pj(si DXi S2)) 
= Tj{a{i),bj){pj{si)) 
= P]{ti) 

= Pj(tlIXli<2) 
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In case of agent i, we have 

Pi(T(j)(si [Xi S2)) = Ti(a(j),Ci)(pi(si cxii S2)) 

= Ti(a(j),Ci)(p,(s2)) 

This completes the proof. □ 

Note that because agents observe the most recent joint external action, if r and r' are traces in 
Fp E with r r' then these traces were generated by the same sequence of joint external actions, 
i.e., a(r) = a(r'). It follows from this that if r and r' are in the same connected component of 
Fp E then we also have a(r) = a(r'). In fact, we have the following stronger result: 

Lemma 6.3 For every trace r we have that: 

• the connected component F of Fp E containing r consists of all traces r' in Fp E with a(r') = 
a(r) and 

• this connected component is isomorphic to the hypercube Tli=Q...n{{f'}i \ f' G F}. 



Proof 1) We prove that r is connected to r' if and only if Si{r) — a(r'). Left to right is immediate 
from Definition 6.5. Right to left follows from Lemma 6.L 

2) For each agent i — . . .n, let ri be any trace of Fp E with a(rj) — a(f). To show that 
the connected component is a hypercube, we prove that there is an r' .such that r' ~j r,. In 
fact, define r' = {. . . (ri ^2 ^2) . • . ixii 

~i fi for all i = 0...n and a(r') 
a(r') = a(r) are connected, and that the component containing r is isomorphic to the hypercube 
Il^=o...n{{r'}^ \ r' E F} . □ 



r„_i) ixi„ r„. By Lemma 6.i, r' is a trace of E, with 
a(r). It is immediate that all traces r' of Fp^E with 



This lemma characterizes the sense in which agents' states of knowledge at times other than 
time in a homogeneous broadcas t sy stem are characterized by a hypercube system. Theorem 6T 
follows immediately from Lemma 3^ . 

We now obtain a result that provides one final characterization of the logic S5WD„. 



Theorem 6.2 The logic SSWD^ is sound and complete for the class of all homogeneous broadcast 
frames. 



Proof Soundness is direct from Theorem 6.1. For completeness, suppose that is not a theorem 
of SSWDn. Since S5WD„ is complete for the class of all hypercubes, there exists a hypercube 
H ^ Le X Li X . . . Ln, where is a singleton, an interpretation tth on H , and a world vu E S 
such that {F{H),tth) \=w '^4'- ^6 show that it is possible to construct a homogeneous broadcast 
environment E whose decomposition into a union of Cartesian products contains H as one of its 
components. Indeed H will be the component consisting of all the traces of length one, i.e., the 
component characterizing the initial state of knowledge of the agents. 

We define the environment E = {S, I, Pq, t, O, V) as follows. For each agent i — . . .n, we 
take the both the set of external actions Ai and the set of internal actions Bi to be the set {e}. 
Thus, the set of actions of each agent is also a singleton, viz {e • e}. The components of the 
environment are as follows: 

• The set of states S = (e, . . . , e; po, • . • ,Pri) where {po,...,pn) G H . Thus, the set Si of 
instantaneous private states of agent i is exactly the set of local states Li of agent i in H . 

• All .states are initial, i.e. I = S. 
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Since the set actions ACTq of agent 0, the environment, is a singleton, the protocol of the 
environment is the unique function Pq : S ACTq. 

The transition function t is defined by T(j)(s) — s for (the unique) joint action j and state 
s. (Thus, similarly, the local transition functions ti satisfy Ti{a.,hi){pi) = pi for (the unique) 
joint external action a., (the unique) internal action hi and private state pi € Li.) 

• The definition of the observation function O is determined by the fact that E is a broadcast 
environment, i.e. Oi{{e, . . . , e;po, . . . ,Pn)) — (fi ■ • ■ , fof eo-ch i — 1, . . . ,n. 

• The valuation V is defined by V{{e, . . . , e;po, • ■ ■ ,Pn), q) = 7rH((po, • • • tPn), q)- 

This is a homogeneous broadcast environment by construction. It is now straightforward to estab- 
lish that for every joint perfect recall protocol P, the connected component of Fe.p consisting of 
all traces of length one is isomorphic to {F{H),nH). (We remark that our choice of action sets 
and transition function above are not actually relevant to this conclusion.) □ 



One way to understand Theorem 3.2 is that it states completeness of S5WD„ with respect to 
a class of models, namely those models obtained by adding an interpretation to a homogeneous 
broadcast frame. In these models the interpretation could assign to a proposition a meaning at 
a trace that depends not just on the final state of the trace, but also on prior states and actions. 
The proof of Theorem |6.2| in fact establishes that S5WD„ is complete for a smaller class of models 
with underlying homogeneous broadcast frames, in which the interpretation tt is derived from 
the environment. Given an environment E with valuation V, define the interpretation tt^ by 
7r£;(r, p) = V{fin{r),p) for traces r of E and propositions p £ Atoms. 

Theorem 6.3 The logic S5WDn is sound and complete for the class of all models of the form 
{Fe.p,tte), where E is a homogeneous broadcast environment and P is a joint protocol. 



Proof Similar to the proof of Theorem 6.i. Note that the construction of this proof uses only 
the initial component of the frame. The valuation of the environment may be chosen to operate as 
required on this initial component. □ 



These results are in some respects similar to results of Fagin et al. |FHV92, FV86]. They show 
that that there exist natural classes of systems with respect to which the logic of knowledge is not 
characterized by S5„, but by a stronger logic ML~, that consists of S5„ plus the following axiom: 

(3 k K,{/3 ^ -.a) ^ Ki^a V ... V Ki^a 

where a is a primitive state formula (intuitively, describing the assignment associated with the 
current state, but not of agents knowledge), and /3 is a pure knowledge formula (intuitively, de- 
scribing properties of the agents knowledge but not dealing with the assignment associated with 
the current state). We refer the reader to |FHV92| for a precise explanation of these terms. In 
particular, one class of systems to which this result applies is a class of systems in which the 
assignment is static, agents communicate by unreliable synchronous message passing and have 
perfect recall [lFV86| . 

Theorem |6.2| provides another interesting and natural class of systems that requires additional 
axioms. In our result, agents also have perfect recall, but the class is otherwise quite different 
from those considered in [FIIV92, FV86| since our agents communicate by reliable broadcast, and 
we allow the assignment to vary significantly from moment to moment. The axiom (WD) we need 
to capture such systems is also quite different from that used by Fagin et al. 

We remark that it is possible to prove a variant of the results of this section that deal with full 
systems rather than hypercubes. For this variant, we modify the definition of homogeneity to state 
that the initial states of the environment form a full system. Moreover, instead of Assumption|6^, 
we assume that for all states s and t with the same joint external action, i.e., a(s) = a(t), and for all 
external actions ao of agent 0, there exists an internal action bo of agent such that ao • 6o G Po{s) 
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iff there exists an internal action 6q of agent such that oq • fog G -Po(s)- (Informally, this means 
that an external action of agent is enabled in s iff it is enabled in t.) The environment and 



protocol in Example 6.1 satisfy both these assumptions. 

Under these assumptions, Lemma |6.2| holds provided we restrict i and j to range over agents 
1 to n only (i.e., we exclude agent 0.) The proof is a trivial adaptation. Consequently, we also 



obtain an analogue of Lemma 6.3 stating that the connected components of Fe,p are full systems. 



7 Conclusions and further work 

In this paper we have formally investigated several classes of interpreted systems that arise by 
considering the full Cartesian product of the local state spaces. We have argued that these 
interpreted systems provide an appropriate model for the initial configurations of many systems 
of interest. Moreover, we have shown that a similar constraint arises at all later configurations 
in the special case of homogeneous broadcast systems. By relating these classes of systems to 
several classes of Kripke frames, we have established that a single modal logic, S5WD„, provides a 
sound and complete axiomatization in all these cases. On the conceptual level, this logic provides 
a well motivated example of interaction among agents' knowledge. We hope that in the near 
future S5WD„ will be just one of the formal options available in the literature and that, with the 
availability of more examples, a systematic study of types of interactions can be carried out. 

In conducting this work, we have identified the interesting class of WD equivalence frames 
that generates a complete and decidable logic. The variation of the canonical model technique we 
used to prove completeness heavily relies on the frames being reflexive, symmetric and transitive, 
properties guaranteed by the fact that we were analyzing extensions of S5,i. This raises the 
question of whether it is possible to prove similar results for weaker logics, such as S4„, which 
model agents that do not have negative introspection capabilities. 

Our results leave open many other questions. It should be noted that the fact that the same 
logic S5WD„ axiomatizes all the different classes of semantic structures we have studied is is due 
in part to the limited expressive power of the language we have considered. It would be interesting 
to investigate more expressive languages containing operators such as distributed knowledge and 



common knowledge [ FIIMV95 ]. In the former case we have already identified the axiom <^ DA(t) 



as of interest with respect to equivalence I frames (Lemma 3.4). 

Although we have shown decidability of S5WD„, the precise complexity of this logic remains 
open. It would also be of interest to determine which of the language extensions contemplated 
above maintain decidability of the logic. Finally, for the dynamic model we have considered, 
extensions of the language to include temporal operators are of interest. Indeed, consideration of 
the logic of knowledge and time in homogeneous broadcast systems is just one example of a range 
of unresolved issues concerning the knowledge of agents operating within specific communications 
models: a great deal of work remains to be done in the axiomatization of logics of knowledge with 
respect to such models. 
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